Device malfunction/ Misuse of technical devices.
Risk Description
This risk involves the disruption of the university’s main hardware, or the programs and systems that serve the most important operations or services provided by the university. This risk involves data lose and interruption of services to the university’s beneficiaries.
Existing Controls
Basic control
Risk Mitigation Policy
- Conduct periodic maintenance of hardware and software.
- Develop rapid maintenance contracts for services in the event of a downtime.
- Allocate emergency teams for hardware or software.
- Making security copies in a systematic manner preserves data and ensures that it is not lost.
- Providing surveillance cameras for data center.
- Implementing procedures and establishing strict policies for accessing data centers.
- Spare Devices: Have backup devices available if need.
- Using international standards to maintain information security.
Location/Contact Person details
The chairman of risk management sub-committee in UTAS-SUR
Dr.Sami Al-Batashi, Phone: +968 9293 9604
Email: sami.albattashi@utas.edu.om
Risk Management Authority
Risk Management Committee in UTAS-SUR
Risk Likelihood
Medium
Risk Impact
High
Risk Level
Medium
Risk Incident Response Procedures
- Prepairing the technical team responsible for the downed systems or devices.
- Initiate investigation and verification to determine the cause of the downtime.
- Resolve the problem, prevent recurrence, and restore the correct data.
- Send a problem and how to resolve it, the extent of the damage, and educate the user and employees.
- Restore the data to its pre-downtime state by using a backup copy if the data is damaged.
Risk Termination
By sending the final report explaining the problem causes and how we can mitigate next time.